Freelance Security ManagersFreelance Security Managers
ProjectsPeople
Ahmed Khan's avatar
Ahmed Khan
Lahore, Pakistan
Cybersecurity specialist with ability to identify flaws
New to Contra
Cybersecurity specialist with ability to identify flaws
Cover image for I discovered a stored cross-site
I discovered a stored cross-site scripting (XSS) vulnerability in a practice web application's comment section that allowed me to inject malicious JavaScript that would execute in any user's browser. By submitting a comment containing a script payload, I successfully stole session cookies from other users and could have hijacked their accounts, performed actions on their behalf, or defaced the website. This finding was documented in a comprehensive report including proof-of-concept screenshots showing cookie theft, CVSS risk scoring of 6.5 (Medium), and step-by-step remediation guidance including input sanitization and output encoding. This assessment demonstrates my ability to find client-side vulnerabilities that can compromise every user visiting the site.
0
23
Cover image for I discovered a SQL injection
I discovered a SQL injection vulnerability in a practice web application that allowed me to bypass the login system and access the entire user database without any credentials. By inserting a simple payload into the username field, I successfully logged in as the first user in the database and extracted sensitive information including usernames, password hashes, and user email addresses. This finding was documented in a detailed report with proof-of-concept screenshots, risk analysis showing potential data breach impact, and step-by-step remediation guidance including parameterized queries and input validation. This assessment demonstrates my ability to find critical database vulnerabilities that could expose thousands of customer records.
0
23
Cover image for During a security assessment of
During a security assessment of a practice web application, I discovered an exposed FTP directory with directory listing enabled, revealing multiple sensitive files including a password database, backup configurations, compiled source code, and error logs. After finding a clue in robots.txt, I navigated to the /ftp directory and documented over ten exposed files with their associated risks. My final report included an executive summary, detailed findings with screenshots, risk ratings for each exposed file, and step-by-step remediation guidance including disabling directory listing and removing sensitive data. This finding highlights how simple misconfigurations can lead to critical data exposure.
0
26
Cover image for I discovered an Insecure Direct
I discovered an Insecure Direct Object Reference (IDOR) vulnerability in a practice web application that allowed unauthorized users to access other people's private snippets simply by changing a number in the URL. Using whatweb and manual inspection, I identified parameter tampering points and successfully accessed private data for five different users without authentication. The finding was documented in a comprehensive report including executive summary, technical details with screenshots, CVSS risk scoring, and step-by-step remediation instructions. This assessment demonstrates my ability to find broken access controls that automated tools miss and deliver clear, actionable fixes.
0
34
Security Manager(4)
Fida Marwat's avatar
Fida Marwat
Phase 1 Pakistan Town, Pakistan
UI/UX Designer | WordPress, Shopify, React, Tailwind/Boots.
8
Followers
UI/UX Designer | WordPress, Shopify, React, Tailwind/Boots.
Cover image for Document Management System
Document Management System
0
5
Cover image for Information System Unified Risk Governance & Evaluation
Information System Unified Risk Governance & Evaluation
0
12
Cover image for Transparent Hands App
Transparent Hands App
0
4
Cover image for Patient Recruitment Management System (PRMS)
Patient Recruitment Management System (PRMS)
0
4
Security Manager(2)
Detlef Wolter's avatar
Detlef Wolter
Campinas, Brazil
Great support turns customers into your cost-free marketers
Great support turns customers into your cost-free marketers
Cover image for Voggt - Customer Support/Safety
Voggt - Customer Support/Safety
0
5
Cover image for Yubo - User Safety Specialist
Yubo - User Safety Specialist
0
6
Cover image for Amazon's DSP Program Time and Attendance Expert - TSM
Amazon's DSP Program Time and Attendance Expert - TSM
0
12
Cover image for Smylor - Dental Treatment Marketplace
Smylor - Dental Treatment Marketplace
0
8
Security Manager(2)
Muhamed Ali's avatar
Muhamed Ali
Egypt
Versatile Cybersecurity & HR Expert
Versatile Cybersecurity & HR Expert
Cover image for Training project , Enhancing Security Awareness: Understanding t
Training project , Enhancing Security Awareness: Understanding t
0
10
Cover image for Onsite Network Pentest
Onsite Network Pentest
0
11
Cover image for Onion Circuit for a special purpose research client
Onion Circuit for a special purpose research client
0
10
Placeholder project card media
View more →
Security Manager(2)
Radu Stan's avatar
Radu Stan
Bucharest, Romania
Cybersecurity expert specializing in Third Party Risk Assess
Cybersecurity expert specializing in Third Party Risk Assess
Cover image for Strategic Cybersecurity Framework Implementation
Strategic Cybersecurity Framework Implementation
0
12
Cover image for Cybersecurity Maturity Model Development
Cybersecurity Maturity Model Development
0
9
Cover image for Comprehensive Third Party Risk Assessment Template Development
Comprehensive Third Party Risk Assessment Template Development
0
10
Placeholder project card media
View more →
Security Manager(2)